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MEMORANDUM FOR: Director Central Intelligence 


FROM : Director Data Processing 
Director, Office of Central Reference 


SUBJECT : SAFE Concerns 


REFERENCE > Your «--- 


1. The enclosed response to the STAP memorandum 
is submitted for your use in preparing for our meeting 


on this subject. 


2. We propose that Mr. i present a brief summary 


elaborating on the enclosed material and be prepared to 


discuss the project status and direction as you see fit. 


3. Messrs . iS pave provided 
one short briefing on SAFE to the STAP. It appears that 


a more extended interaction with that body is in order. 


4, The first enclosure addresses your expressed specific 


concerns. The second, the remainder of the STAP memorandum, 
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CONCERN: 
1.0 What steps are being taken to ensure that the Agency, 


rather than the contractor is in control of the technical 
aspects of the design of the system? 


i gon inl pee gee 

RESPONSE: 2 wh sorte fee 57 rong A ae feeb } f 
we. ce rie Vp ademIct aud we helper: (x) 

1.0 In recognition of the problems of technical communication 


and management control comunded by geographical separation 


a number of steps have been taken as follows: 


a) The Government has contracted for a system development 
rather than technical effort. The contractor is 
af 
responsible for PA ee development with 


government controls as noted below. 


’) (The Government defines the functions and performance 


of the system as seen from a users perspective. 


ey ( The development is performed to government require- 
ments specification in accordance with MIL Stds. 490 
and 154 with government approval required of all 


specifications and designs. 


¥) Che Government approves all solicitation documents, 


evaluation plans and contract awards by TRW. 
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e) 


£) 


g) 


hy, 


i transfer to California, 


i) 


3) 


Monthly formal project reviews are conducted by The. 


CSPO. . lpn sehidelffied, SFE TG) ef OW (Ceres), 


Technical staff interaction daily by phone and 
virtually continuously through travel maintains 


communication. 


The contractor has several permanent representatives 


located in Rosslyn. 


A full time representative is being considered for 


a . : LS ie ieee ie ie \ 


Travel will continue to be heavy in any event. 


Delays in decision making are not geographical 
problems. They are problems associated with hard 1 
choices. An on-site representative could provide i 


oversight and some guidance but those problems 


a 


“ 


of larger scope are not one-man eee 
ee 


The Agency has in place a strong technical management 
team. The contract effort is under control and the 


needs of two Agencies are being addressed successfully. 
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CONCERN: 


4 


2.0 How is SAFE management ensuring that a final working 
system has been developed from the continuing evolution of 
an operationally valid pilot system? How has SAFF taken 
‘advantage of the experience of similar, very large systems 
in their: 


1) system architecture, 
2) communication and control, and 
3) changing performance requirements? 


Se Oem ate Gtnrs . =o 


RESPONSE: 


2.0 , The "operationally valid pilot system'from which evolution 
which ol] pe delirevad of Ol a (6821) 
will take place is the IOC systemy ,, Experience withs"Interim" 
ok ‘ ee 4 0, and €. 
alt rafla vs 1473) P ¥- 
SAFE syste Ars being used in building the operational system. 
_ Data and usage patterns ,as well as user reactions,are used 


in requirements specifications, system sizing, function 


allocation and usage scenario development. Further, fassice 


a \ 


vend anesy age ae as being used -to estimate traffic-on_the 
"€inait- system. 


perk Kwan x 


j Compuders 
q We have dictated the maximum use of general purpose 


andy software to ensure that the changes required in future 


years can be accommodated. 


The system architecture proposed is based on TRW and 


Government experience with large systems. It distributes 


Joo communications and control functions as well as file processing 


such that bottlenecks are avoided and parallel expansion is 


possible without redesign. New functions may be added at 
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or 
either the top em mid-level processors ,and functions may be 


moved between levels to compensate for loading or usage changes. 


We expect the initial system to have masy shortcomings. 
All major systems do. .We-are—striving-to-do two things: 
/ 
ay Provide valuable and reasonable service to a 
PA 
significant-user population and 
Pa 
a 
we 


7 ; 
—b)“-Permit change and -improvement in future years. 


jf 
We expect, the initial system ee provide significant 


improvements in service and value over the current environment. 


& 5 a ah. STP. pernaremdorre be fad, 
qacautionary note ,is well founded. We should expect -an."**: 


ra 


page Pet Year 79 antiedd.. wi es ae a aa sneel D> tahoe pf 
‘  -introducto ory period ‘for Services of-up to a year set ie moors 
Cae: tether, 


ax TO 


ee ae 

should expect ~to-continue_evolutton in future’ years. The 
SAFE budget for 1982 and beyond recognizesthis process. 
Again, the-IOC. system is the "operationally valid" pilot 


system_from which the long range system will evolve. 
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CONCERN: 


3.0 The SAFE user community consists of Intelli: 12. 
community analysts covering the full spectrum of research 
into foreign political, military, economic, scientific, 
and technological activity. Their effective use of this 
system and, ultimately, the quality of intelligence they 
produce rest on whether their real needs can De identified 
and satisfied by the system. . pees 


RESPONSE: : tig Be aaa pee of | 
— phat 
ag ay i ae ! 


3.0 ‘tSee-item ty J.telh 


There has been more user involvement in the definition 
of the SAFE System than any system with which we are 
familiar. The interaction is continuing to refine and 
revalidate the system functions with the user. We come 
preeariously -close_at times to providing-too much~input 
te-the process and de railing the development effort. The 


CSPO maintains the balance of oe Shp with the contractor 


and - through ser Osees eles ae Y i fase ee rear, 
Loe O 


All data gathered on the interim system usage has 
been forwarded to TRW. All prior study material has 


likewise been forwarded. These data are used to develop 


system design and flow threads. -H An C_ 


| pipet 
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CONCERN: 
4.0 How can the Agency make a reasonable evaluation of the 
current status of SAFE with major portions of the proposed 
operational capabilities either unspecified or uncommunicated 
to the Agency? Yor example, 

1) the user command language and its parsing, 

2) the user programming language, 

3) the user editing languages, and 


4) procedures for backup, including regeneration of 
derived files lost in crashes. 


RESPONSE : hb neat OAGTY cop lt, 


4. Zhe operational capabilities, required are specified in 
the ae written by the Government. The contractor's 
translation of those capabilities to system design are 
encompassed in ‘(He ine Sol ic 2s ion, System peston-specitication— 
and sub-system and element specifications. These are being 
developed on schedule with a normal amount of difficulty. 
Problems are addressed early in the process and corrective action 
is taken. ~Frequent—meetings—ant- exchanges of tocuments—and.. 
vkeus. are expected to salt when the 


design documents are-prepared.’ Contract schedule, cost and 


f management are all monitored for signs of difficulty. 


- L (bepoye ) 
in cyarphe 7 é 
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CONCERN: 
5.0 What actions are under way to insure that the Intelligence | 
Community has access to CIA SAFE and that CIA SAFF has access 
to DIA SAFE as well as such systems as COINS and SOLIS? 
RESPONSE: 
5.0 The basic system requirement has been given the 
contractor to provide interconnection between the two Agencies. 
Five lines will be provided with expansion capacity to 25, 
The control of access, differing security clearance practices 
and control of limited access information will have to be 
worked out among the using and security organizations of the 
Agencies, With the security features of the system being 
developed, it is hoped that administrative procedures and 


software safeguards will be adequate. 


Generalized community access has not been envisioned 
in the initial system and presents additional security and, 
more vitally, loading problems. Previstons—for—further 
linkages-cafn be~provided for-latér Usé,~but-the- use OF 
such-a linkage must be defined early within~the community 
if itis tobe developad. (y abody 2 5 cee 


7 
This—is_a major fe hee ee basic SAFE concept. 


—é 


We believe that a "community" system should be developed 
after SAFE and that SAFE would be a prototype for replication 


and potentially be a node in a community network. 


ee 
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STATSPEC 
CONCERN: 


6.0 How will SAFE deal with open source material? will 
material, either finished publications or field reporting, 

be made available to the analyst through SAFE? How will SAFE 
deal with current newspaper and journal entries? 


STATINTL RESPONSE: {| ../ ji- 


| 
STATSPEC 6. BBMMMis an input to SAFE. Both finished [J repsesPec 


and raw input are supplied to SAFE. OGOther—opern—seusces 


“—~have-not--been-planned fer-on-line access. Wire services, if 


subscribed to, can be added either on-line or as separate 
| collectors for periodic input to SAFE. Data banks such as 


_ N.Y. Times-may be added, with adequate-protection, for.use. 


_ from analysts workstations. This has not been asked for, but 


if required by the user it moderate expense 


as a controNed link. It is\currently avail&ble in the 


Terminal Access’ Room and this direct link wilk be used 


initially. 
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CONCERN: 


7.0 What steps are being taken to ensure that SAFF will be 
designed to allow collaborative usage? 


RESPONSE: ay Sa ee ee 
will be a. ford ol SAFE 
7. Teleconferencing witt-not—be-eliminated or déferred 
—for—later implementation as initially proposed by TRW. This 
CU At OE weed 

will be permitted between A as well as within each 

Agency, ) ; toa BGecu wf Coren ractatt Tl TCD PE baie Sail ae ) 

o-Ps 

The generalized routing function will also be used for 


staffing and coordination as well as for further dissemination 


of information. . she as 
’ leet HG, aCeten . 


} 


trable 


hat these functions will be of consid 
value. Conferencing has/consistently appeared low/on the 
list of ~riorities sinte routing partAally fulfisled that 


need. * 


# 
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CONCERN 


8.0 What steps are under way to ensure that in the 
procurement of major hardware items, these items will be 
compatible with existing Ayency systems? 


PLR enced 2 cog tore ees 

f 
RESPONSE: The # 
Ahh Cit bot UY 


Q es involved. A es different hardware. oa (2a 


fl weit 
M-- while DIA i: Honeywell. Compatibility 

has been factored into the hardware RFP and a verte. seb » 
aE or cost evaluation,“ tncumbent,yven ors thus have 


a cost advantage roughly equivalent to anticipated cost 


of supporting varied architectures, ss . 
a 2 fi = J oo" ved ae 
rele ea 


bly. SHEE wi ering 


Interconnectionjis planned and is part of the contracted 


effort. The interface software for SAFE has been considered 


as a direct contract cost. The—existing syst 


rotocols 


are_specified- -to-whith SAFE must interface... 
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CONCERN: C. "As Described by -........ 


RESPONSE: The -SAFE-user-tcommimity has definéd the functions. 
whic th the system is to porsann. Khe Consolidated 
(V) . APE Requirements pocunensy, which is the foundation 
. H 
\ A of the technical development, was developed with i 
¥ NERC wd DIA 
and largely by the,using community. In the CIA 
this work began in 1972 and has included: 


o Pilot groups of 50 analysts defining useful 
functions 


o Pilot systems development in 1973/4 

o Pilot branches to date provide usage data 
o User work shops in 1975 

o 600 analyst survey in 1976 

Oo SAFE Procedures Development Laboratory 

Oo Project Upstairs/Downstairs with analysts 


o Newsletters 


© Direct interaction with CSPO and contractor 
of NFAC user representatives 


In DIA there are 57 points of contact in user organizations 


who provide advice on requirements and are fully informed 


of project status. An extended data collection effort 
from 1977 to the present has developed user requirements 


which have been staffed with top level user management. 


nate: Saher a inna 
ere esemtntmcmemnnene 
a 


ANAS HE NF ICE ewe ms a 


a 


Four former analysts are resident in the cSspo 
F CHL 
i) to control the flow oF gad fee and to ensure 
that they are met. ne group coordinates heavily 


with both Agencies. 
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CONCERN: D. How can CIA --~.,... 


RESPONSE: The Government defines the functional and 
operational capabilities of the system. The 
Consolidated System Requirements Document is 
a contractually binding document. The current 


evaluation of SAFE centers primarily on the 


contractor's performance in meeting the require- 

| ments. In such areas as user language development, 

| a close interaction with the user representatives 
and the contractor to minimize the time required 

for a satisfactory language definition. For example, 
STATINTL Ht. Eo wenc vorkea with mM 

| the week of 17 March in a continuing liaison to 
ensure that user scenarios used for language/ 


interaction definition and design are correct. 
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B. How will SAFE deal with Open Source Material? 


” 


RESPONSE: continue as a direct input to SAFE, Raw 


input is provided electrically. Other open 


source material is available on separate terminals - 


~but may be accumulated directly if required. 


Interactive data bases and their use require 
connections with outside communications which 
have been forbidden on security grounds. An 
intermediate process can be introduced to 
provide isolation should vastly improved access 


be required by the user. 


Vast quantities of open source material are 
and will be entered by OCR and individual analysts 
from periodicals, newspapers, etc, OCR has begun 
experimentation wtih Optical Character Reader 
processing of printed copy. This may provide 


further input in significant volumes. 
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Response to Specific Concerns Reyarding SAFE 
CONCERN: A. There are no plans at present to connect 
the CIA and DIA SAFE Systems. 

RESPONSE: The CIA and DIA SAFE systems will be interconnected, 
Since neither Agency's users have specified this 
connection as a requirement, the contractor did 
not include it in his initial System Requirements 
Specification. The project office has initiated 
a change order to include the connection in early 
1984. Five lines are planned initially with expansion 


capacity to twenty~five in the initial design. 


DIA SAFE has access to COINS and thus to 
to SOLIS. The CIA analyst will thus be able to 


access these systems via this link. 


Approved For Release 2001/04/01 : CIA-RDP84-00933R000500120005-1 


a tt 


